MikroTik IPsec Configuration

Phase 1

Profile Name:

Remote Gateway (IP Address):

Local Address (Single IP, optional):

IKE Version: IKEv2 IKEv1

Authentication Method: Pre-shared Key RSA Signatures

Pre-shared Key:

Encryption Algorithms (multiple allowed): AES-128 AES-192 AES-256

Hash Algorithms (multiple allowed): SHA1 SHA256 SHA384 SHA512

DH Groups (multiple allowed): Group 2 Group 14 Group 15 Group 16 Group 17 Group 18 Group 19

Remote ID (optional):

Phase 2

Profile Name:

Local Address (or Subnet):

Remote Address (or Subnet):

Encryption Algorithms (multiple allowed): aes-128-cbc aes-128-ctr aes-128-gcm aes-192-cbc aes-256-cbc aes-256-ctr aes-256-gcm

Hash Algorithms (multiple allowed): SHA1 SHA256 SHA384 SHA512

PFS Group: Group 14 Group 15 Group 16 Group 17 Group 18 Group 19

Lifetime (seconds):